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CLAIMS 

What is Claimed is : 

1 1 . A method of storing program material for subsequent replay, comprising 

2 the steps of: 

3 receiving a data stream comprising the program material encrypted according to a 

4 first encryption key and control data, the control data comprising the first encryption key 

5 and being encrypted; 

6 further encrypting the encrypted program material according to a second 

7 encryption key; 

8 encrypting the second encryption key according to a third encryption key to 

9 produce a fourth encryption key; and 

10 storing the further encrypted program material and control data and the fourth 

1 1 encryption key. 

1 2. The method of claim 1, further comprising the steps of: 

2 retrieving the stored further encrypted program material, control data and the 

3 fourth encryption key; 

4 decrypting the fourth encryption key using the third encryption key to produce the 

5 second encryption key; 

6 decrypting the further encrypted program material with the second encryption key 

7 to produce the encrypted program material; 

8 decrypting the control data to produce the first encryption key; and 

9 decrypting the encrypted program material using the first encryption key. 

1 3. The method of claim 2, further comprising the steps of: 

2 accepting a PPV request before decrypting the encrypted program material using 

3 the first encryption key; and 

4 recording billing information regarding the program material. 
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1 4. The method of claim 2, further comprising the steps of: 

2 further encrypting the control data according to the second encryption key; 

3 storing the further encrypted control data; and 

4 decrypting the further encrypted control data according to the second encryption 

5 key. 

1 5. The method of claim 2, further comprising the step of providing the 

2 program material to a presentation device. 

1 6. The method of claim 2, wherein the data stream is received in a receiver 

2 and the third key is unique to the receiver. 

1 7. The method of claim 6, wherein the second key is unique to the receiver. 

1 8. The method of claim 1, wherein the further encrypted program material, 

2 the control data and the third encryption key are stored on a disk drive device. 

1 9. The method of claim 8, wherein the disk drive device is a hard disk drive. 

1 10. The method of claim 8, wherein the disk drive device is an optical disk 

2 drive. 

1 11. The method of claim 1, wherein the data stream further comprises 

2 metadata describing program material replay rights. 

1 12. The method of claim 1 1 , wherein the second encryption key is derived at 

2 least partially from the metadata. 
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13. The method of claim 12, wherein the second encryption key is derived at 
least partially from the broadcast time of the program material. 
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1 14. The method of claim 13, further comprising the step of augmenting the 

2 second encryption key with at least a portion of the metadata before encrypting the 

3 second encryption key according to the third encryption key. 

1 15. The method of claim 14, further comprising the steps of: 

2 retrieving the stored further encrypted program material, control data and the 

3 fourth encryption key; 

4 decrypting the fourth encryption key using the third encryption key to produce the 

5 second encryption key and the portion of the metadata; 

6 decrypting the further encrypted program material with the second encryption key 

7 to produce the encrypted program material; 

8 accepting a PPV request; and 

9 determining if the PPV request is permitted using the portion of the metadata; and 

10 decrypting the control data to produce the first encryption key and decrypting the 

1 1 encrypted program material using the first encryption key if the PPV request is permitted. 
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1 16. A receiver for storing program material for subsequent replay, comprising: 

2 a tuner, for receiving a data stream comprising encrypted access control 

3 information and the program material encrypted according to a first encryption key, the 

4 access control information including the first encryption key; 

5 a first encryption module, communicatively coupled to the tuner and 

6 communicatively coupleable to a media storage device, for further encrypting the 

7 encrypted program material according to a second encryption key and for encrypting the 

8 second encryption key according to a third encryption key to produce a fourth encryption 

9 key; 

10 a first decryption module communicatively coupleable to the media storage 

1 1 device, for decrypting the fourth encryption key retrieved from the media storage device 

12 using the third encryption key to produce the second encryption key, and for decrypting 

1 3 the further encrypted program material retrieved from the media program device to 

14 produce the encrypted program material; 

15 a conditional access module communicatively coupled to the first decryption 

16 module, for decrypting the encrypted access control information to produce the first 

1 7 encryption key; and 

18 a second decryption module, for decrypting the program material using the first 

19 encryption key. 

1 17. * The apparatus of claim 16, further comprising a media storage device 

2 communicatively coupled to the first encryption module and the first decryption module, 

3 for storing and retrieving the further encrypted program material and the control data and 

4 the fourth encryption key. 
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1 18. The apparatus of claim 16, wherein: 

2 the first encryption module further encrypts the encrypted access control 

3 information according to the second encryption key; and 

4 the first decryption module further decrypts the further encrypted access control 

5 information according to the second encryption key. 

1 19. The apparatus of claim 18, further comprising: 

2 a user I/O device for accepting a viewing request; and 

3 a purchase history module for accepting and storing billing information regarding 

4 the program material. 

1 20. The apparatus of claim 19, wherein the conditional access module decrypts 

2 the encrypted access control information in response to the acceptance of a viewing 

3 request. 

1 21. The receiver of claim 1 7, wherein the second encryption key and the third 

2 encryption key are receiver-unique. 

1 22. The receiver of claim 17, wherein the first decryption module and the first 

2 encryption module are implemented in a single chip device. 
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1 23. A method of storing program material for subsequent replay, comprising 

2 the steps of: 

3 accepting a received data stream comprising the program material encrypted 

4 according to a first encryption key and control data, the control data comprising the first 

5 encryption key and being encrypted; 

6 further encrypting the encrypted program material according to a second 

7 encryption key; 

8 encrypting the second encryption key according to a third encryption key to 

9 produce a fourth encryption key; and 

1 0 providing the further encrypted program material and control data and the fourth 

1 1 encryption key for storage. 

1 24. An apparatus for storing program material for subsequent replay, 

2 comprising: 

3 means for accepting a received data stream comprising the program material 

4 encrypted according to a first encryption key and control data, the control data comprising 

5 the first encryption key and being encrypted; 

6 means for further encrypting the encrypted program material according to a 

7 second encryption key; 

8 means for encrypting the second encryption key according to a third encryption 

9 key to produce a fourth encryption key; and 

10 means for providing the. further encrypted program material and control data and 

1 1 the fourth encryption key for storage. 
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1 25. An apparatus for storing program material for subsequent replay, 

2 comprising: 

3 means for receiving a data stream comprising the program material encrypted 

4 according to a first encryption key and control data, the control data comprising the first 

5 encryption key and being encrypted; 

6 means for further encrypting the encrypted program material according to a 

7 second encryption key; 

8 means for encrypting the second encryption key according to a third encryption 

9 key to produce a fourth encryption key; 

10 means for storing the further encrypted program material and control data and the 

1 1 fourth encryption key. 

1 26. The apparatus of claim 25, further comprising: 

2 means for retrieving the stored further encrypted program material, control data 

3 and the fourth encryption key; 

4 means for decrypting the fourth encryption key using the third encryption key to 

5 produce the second encryption key; 

6 means for decrypting the further encrypted program material with the second 

7 encryption key to produce the encrypted program material; and 

8 means for decrypting the control data to produce the first encryption key; and 

9 means for decrypting the encrypted program material using the first encryption 
10 key. 

1 27. The apparatus of claim 25, further comprising: 

2 means for accepting a PPV request before decrypting the encrypted program 

3 material using the first encryption key; and 

4 means for recording billing information regarding the program material. 
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1 28. The apparatus of claim 25, further comprising: 

2 means for further encrypting the control data according to the second encryption 

3 key; 

4 means for storing the further encrypted control data; and 

5 means for decrypting the further encrypted control data according to the second 

6 encryption key. 

1 29. The apparatus of claim 25, further comprising means for providing the 

2 program material to a presentation device. 

1 30. The apparatus claim 25, wherein the data stream is received in a receiver 

2 and the third key is unique to the receiver. 

1 31. The apparatus of claim 30, wherein the second key is unique to the 

2 receiver. 

1 32. The apparatus of claim 25, wherein the further encrypted program 

2 material, the control data and the third encryption key are stored on a disk drive device. 

1 33. The apparatus of claim 32, wherein the disk drive device is a hard disk 

2 drive. 

1 34. The apparatus of claim 31, wherein the disk drive device is an optical disk 

2 drive. 

1 35. The apparatus of claim 25, wherein the data stream further comprises 

2 metadata describing program material replay rights. 
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36. The apparatus of claim 35, further comprising means for augmenting the 
second encryption key with at least a portion of the metadata before encrypting the 
second encryption key according to the third encryption key. 
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1 37. The apparatus of claim 36, further comprising: 

2 means for retrieving the stored further encrypted program material, control data 

3 and the fourth encryption key; 

4 means for decrypting the fourth encryption key using the third encryption key to 

5 produce the second encryption key and the portion of the metadata; 

6 means for decrypting the further encrypted program material with the second 

7 encryption key to produce the encrypted program material; 

8 means for accepting a PPV request; and 

rfjj 9 means for determining if the PPV request is permitted using the portion of the 

II 10 metadata; and 

«F 1 1 means for decrypting the control data to produce the first encryption key and 

m 12 decrypting the encrypted program material using the first encryption key if the PPV 

1 3 request is permitted. 
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